VARITE INC · 1 month ago
Sr. Cyber Security Operations Lead
VARITE INC is seeking a Senior Cyber Security Operations Lead to identify threats and vulnerabilities in systems and software. The role involves developing and implementing high-tech solutions to defend against cybercrime, managing incident responses, and overseeing the agency-wide IT security program.
Information Technology & Services
Responsibilities
Create and maintain an agency-wide IT security program
Ensure alignment with applicable regulations and industry best practices
Running point on all incident response
Develop and enforce security policies, procedures, and control techniques
Ensure compliance with directives from the Office of Information Technology, Internal Revenue Service (IRS), Social Security Administration (SSA), and agency-specific requirements
Assess risks to information systems and data
Implement cost-effective measures to reduce risks to acceptable levels
Detect, report, contain, and mitigate cybersecurity incidents
Coordinate incident response efforts with the Agency's Safeguards Coordinator and federal entities like the IRS and SSA
Oversee automated and continuous monitoring of systems for vulnerabilities and threats
Ensure security processes are integrated into strategic, budgetary, and operational planning
Work closely with the Agency CIO, senior deputies, and staff to enhance security measures
Participate in inter-agency councils, such as the Client Security Council, to align security strategies
Qualification
Required
Bachelor's degree in a relevant field
Experience in information security or related field including leadership role
Hands on experience in risk management, incident response, vulnerability assessment, security architecture
Familiar with NIST standards
Relevant certifications in cybersecurity (CISSP,CISM,CISA)
Familiar with technologies such as Splunk, SolarWinds, and Azure ARC
Experience in managing cybersecurity teams or IT security professionals
Firewall knowledge
Experience in incident response, including detection, containment, and mitigation of cybersecurity threats
Have you conducted regular vulnerability assessments for information systems?
Have you applied risk management methodologies in compliance with industry standards?
Experience developing security policies
Preferred
7–10 years of experience in information security or a related field, including leadership roles
Hands-on experience in risk management, incident response, vulnerability assessment, and security architecture
Strong knowledge of infrastructure systems is a plus
Familiarity with NIST standards is a plus but not required
Relevant certifications in cybersecurity are a plus (e.g., CISSP, CISM, CISA)
Familiarity with technologies such as Splunk, SolarWinds, and Azure Arc is desirable
Firewall knowledge is a plus